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Abstract 

In the black-box model, problems constrained by a 'promise' are 
the only ones that admit a quantum exponential speedup over the best 
classical algorithm in terms of query complexity. The most prominent 
example of this is the Deutsch-Jozsa algorithm. More recently, Wim 
van Dam put forward an algorithm for unstructured problems (i.e., 
those without a promise). We consider the Deutsch-Jozsa algorithm 
with a less restrictive (or 'broken') promise and study the transition 
to an unstructured problem. We compare this to the success of van 
Dam's algorithm. These are both compared with a standard classical 
sampling algorithm. The Deutsch-Jozsa algorithm remains good as 
the problem initially becomes less structured, but the van Dam algo- 
rithm can be adapted so as to become superior to the Deutsch-Jozsa 
algorithm as the promise is weakened. 

1 Introduction 

It is known that for a quantum algorithm to achieve a black-box exponen- 
tial speedup over a classical one, the problem in question must be con- 
strained by a 'promise' (Buhrman et al., 1. ). In the Black Box model 
of computation, where the oracle contains a set of Boolean variables 

= (/o) /i) /2 ■ • • /Af-i)) about the properties of which questions can be 
asked (eg, 'do all the fi have the value 1', or 'do the fi contain at least one 
1') through queries of the oracle, a problem with a promise is one with a 
restriction on the Fs that are allowed. 

The Deutsch-Jozsa problem is an example of a problem with a promise, 
where the question is one of deciding whether or not a given function is 
'balanced' or 'constant' (each of these criteria describes a set of possible 
F from the set of all possible A^-bit strings and so comprises a promise as 
described above). We consider a relaxation of the promise on this problem 
(i.e., we allow extra possible F) and consider how this affects the efficacy of 
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the Deutsch-Jozsa algorithm as the weakening of the promise is increased 
and the problem becomes less structured. 

Following an introduction to the standard Deutsch-Jozsa problem (in 
section 121), we modify /weaken the promise on the Deutsch-Jozsa problem in 
section 131 and then consider the performance of the Deutsch-Jozsa algorithm 
on this modified problem, particularly in the limit of large numbers of in- 
put qubits and queries, providing asymptotic results. A classical algorithm 
based on sampling is devised to address the new problem and its success 
probability is considered in the same limits. In section ITU we introduce van 
Dam's Quantum Oracle Interrogation algorithm |31 (which is designed for 
unstructured problems), consider how well it can be adapted to solve the 
modified problem and compare its performance with that of the Deutsch- 
Jozsa algorithm as the problem becomes less structured; this allows us to 
determine in which regimes one might prefer to use which algorithm. 

2 The Deutsch-Jozsa Problem and Algorithm 

The Deutsch-Josza problem is to recognise whether a Boolean function /, 

{0, 1}"" 1-^ {0, 1} is 'balanced' or 'constant' (that the function has one of 
these two properties is the promise on the problem). A constant function 
is one for which f{x) evaluates the same, for all x G {0, 1}" (i.e., either the 
f{x) are all Is or all Os). A balanced function is one in which f{x) is equal 
to for exactly half of the x and 1 for the other half. This comprises a 
restriction on the possible contents of the oracle, F = /o/i . . . Jn-i where 
N = 2'^ and fx = f{x). The Deutsch-Jozsa algorithm j^-jOl solves this 
problem with one query and with no probability of error. 

The input state for the Deutsch-Josza algorithm is an equal superposition 
of all the \x) such that x £ {0, 1}" (constructed by acting on |00 . . . 0) with 
H^"'), with an ancilla qubit in the state "^(|0) — |1)). This is then acted 
on with the operator Uj : Uf\x)\y i— > \x)\y © /(x)) which, given that \y) is 
the ancilla bit already described and '©' represents addition modulo 2, has 
the effect of introducing a phase (— l)-^^^') to the state \x). Finally an n-bit 
Hadamard is applies to the first n qubits (the ancilla is discarded) and then 
the resulting state is measured along \z = 0). The process, omitting the 
ancilla quibit, is summarised below: 
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1 



=2"-l 




■x.z 



(1) 



z,2:=0 



where 'x.z' refers to the scalar product between bitstrings {x.z = xizi © 
X2Z2 © ... © XnZn)- Consideration of the state \z = 0) reveals that its 
amplitude is 1 if the function is constant and if the function is balanced, so 
measuring along 1^ = 0) will allow perfect differentiation between the cases 
of the function being balanced or constant. Achieving this feat classically 
would require examination of half of the values of f{x) plus one, for a total 
of 2"""^ + 1 queries and, therefore, an exponential disadvantage as compared 
to the quantum algorithm. 

If error is allowed, a classical algorithm needs far less queries to achieve 
a small error (see, eg, j2j). This algorithm progresses by looking at bits 
and as soon as a bit is observed which is different to previous bits, the 
algorithm halts and returns the result 'balanced', else it terminates after k 
bits examined (i.e., k queries to the algorithm) and returns 'constant'. The 
only possibility of error, therefore, is when k identical bits are observed (in 
which case the result 'constant' is returned) and the function is, in fact, 
balanced; the probability of this occurring is just the chance of selecting k 
identical objects from a sample of two species of equal number. 



where p is the probability that the function is actually balanced and N = 2"^. 
If the constant and balanced cases are equally likely and k <^ N, 



and we can see that a comparatively small number of queries k can produce 
an accurate answer. 





fail — 



(3) 



3 Breaking the Promise 



We can imagine weakening the promise on the problem in the following 
way: introducing y bit-flips into the = 2" bit string that characterises 



the function /, at random positions, would correspond to saying that the 
function is 'nearly balanced' or 'nearly constant', up to y deviations from 
the promise. In this section, when we say 'constant' we are actually referring 
to 'nearly constant', and similarly in the case of 'balanced'. 

3.1 Deutsch-Jozsa algorithm with broken promise 

The Deutsch-Jozsa (DJ) algorithm can be used unmodified on the new prob- 
lem. If the function f{x) is actually balanced, then in the coefficient of 
1 2 = 0) in equation we no longer see the cancellation caused by equal 
numbers of terms with /(x) = 1 and f{x) = in the index of the —1. We 
now have + v) of ±1 in the phase of |z = 0) and — y) of ^1. There 
is, therefore, a non-zero coefficient of = 0), oq: 

«o = (4) 

which leads to an error probability Pbai of (given that error in this case is 
measuring \z = 0)): 

Pbal = (5) 

For y weakenings in the promise on the actually constant n-bit function 
/(j;), we find that for the D-J algorithm we have: 

«o = ±(l-^). (6) 

It is an error, in the case where f{x) is constant, if we do do not observe 
1^ = 0), so our error probability in this case Peon is given by: 

Pcon = y22-"-y222-2n^ (7) 

and we see that the error is worse if the function is actually constant than 
if it is balanced^. Assuming that the probability that the function f{x) is 
balanced is p, the error probability Pfaii from one query to the quantum 
algorithm is: 



Pfail = pPbal + (1 - P)Pcon 

= py2^-^ - py222-2n + (l _ p)y^2^-^n 

= py2^- " + (1 - 2p)y222-2-, (8) 

^This is because any redistribution of the outcome probabilities in the 'constant' case 
wiU give rise to error (because it gives rise to probabihty of observing \z ^ 0) , whereas 
the only redistribution of the outcome probabihties that will cause error in the 'balanced' 
case is that which specifically causes an increase in the probability of observing \z = 0) 
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which, where each case is equally probable {p = 2)) is given by: 



Pi.il = 2/21-^^ (9) 

for a single query. 

The chance of the quantum algorithm failing we assess by majority deci- 
sion over k queries (for direct comparison with van Dam's algorithm and the 
classical case); this is the chance that > | of the results return the wrong 
result (all evaluated on copies of the same function) and is given by: 

Pfail = E ( n - ^^1)'"' + - - ^con)'^-'^) . (10) 

r= — 
' 2 

We have that the mean failure probabilities for the balanced and constant 
strings are 

/Wbal = kP^ai = -Jp- (11) 
Hoon = ^Pcon = ^(l-|) (12) 

and the variances are given by: 

<rLi = klUil - lU) = ^ (l - ^) (13) 

^ *P„.(l-P™)^f^(l-|)(l-|.U). (14) 

If we consider the limit where y « N and also that k is large enough to 
allow the binomial distribution to be approximated by a normal distribution, 
we have that 
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1-erf 



O'bal 
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1-erf 



lV2 



(15) 



Since the mean value for the constant probability is smaller, the term 
for the 'near-constant' string dominates the failure probability (since we are 
considering probabilities at the upper tail end of the distribution). With 
k large enough that we can use the approximation for the complementary 
error function, erfc(i) ~ /a^V^, and with the probabilities of actually 
having a balanced or constant function being equal, we have that 



so that, taking the logarithm of Pfaii for ease of comparison with the other 
algorithms: 
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3.2 Classical algorithm with broken promise 

Once we allow weakenings of the promise, the classical algorithm from sec- 
tion [21 becomes particularly poor; whereas previously the algorithm only 
failed in the case that the function was actually balanced, as the number of 
weakenings increases it becomes more probable that a constant function will 
be described as balanced and it is this probability that dominates the error 
probability relatively quickly. The existing algorithm is closely tied to the 
promise being unbroken, but a new algorithm, based on sampling, is easily 
designed. 

This algorithm queries k values of the function and then makes a decision 
depending on the relative numbers of bits in the sample, by counting the 
number of Os in the sample, k^. The proportion of Os in the sample is used as 



an estimator 



Po 



ko 



for the number of Os in the full N bit string of Is and 
Os that describes /. The algorithm then infers balanced if 0.25 < < 0.75, 
or constant otherwise. This estimator is unbiased since its expected value 
E{pq) = Nq/N, the true proportion of zeros in the string, independent of 
the degree of weakening. This algorithm avoids the severe failure in the case 
of 'actually constant' from which previous classical algorithm from section 
|2l suffers. 

This new classical algorithm fails if we have a constant (i.e., 'weakened 
constant') string and yet observe the number of Os, ko, in the k queries such 

< 

ko, in the k queries such that ko < j or ko > ^ In both of these cases, the 
wrong inference is made. 

If we describe the event 'observing | < /cq < ^' as the property 
'string is balanced' as Ai and the property 'string is constant' as A2, then 
we can write an expression for the probability of algorithm failure, Pfaii, in 
terms of the conditional probabilities of deciding on one case given that the 
other is actually the case: 



that J < ko 



or if we have 'balanced' and yet observe a number of Os, 

3k 



Pfail =P(1 



+ ^P{B\A2b) 
(18) 
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in which the subscript a refers to the case when there is an excess of zeroes 
in the values of f{x) and b refers to when there is an excess of ones and, 
as before, p is the probability that the function is actually balanced, and the 
classical probabilities can be well approximated by the binomial distribution 
in the case of 'large' query number, so that 
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(19) 

(20) 

(21) 

(22) 
(23) 



In the limit of large k and y/N < 1/4, it is the 'balanced' string that 
dominates the error probability. Asymptotically we can use the central limit 
theorem to approximate the cumulative probability as an error function. 
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Pfaii is then given by: 

Pun ~ p{l-^{P{B\Aia + PB\Aj)) 
Using the identity erf(— x) = — erf(x) we find. 



(i - ^) 



(24) 
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So that assuming k is large and using the same approximation for erfc(x) as 
in the DJ case, we find 
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3.3 Comparison of Classical and Deutsch-Jozsa algorithms 

We can compare the classical and Deutsch-Jozsa algorithms, in the region 
where the approximations hold, through examination of equations El and 
1281 We are primarily interested in the limit where S> 3> 0. Equating 
the two expressions for InPfaii and where k is large, we have that equality 
in failure probability is approximately achieved by solving: 
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(29) 



We see that in this regime, the solution is independent of k and that the 
degree of weakening at which the D J and classical algorithms yield the same 
failure probability tends to y/N ~ 0.0973. If the weakening of the promise 
is greater than this, the classical sampling approach works better than the 
DJ-based approach. 

3.4 Quantum Oracle Interrogation 

Since reducing the strength of the promise is akin to making the problem 
less structured, we compare the power of the DJ algorithm with that of an 
algorithm that is specifically tailored for completely unstructured problems, 
the Quantum Oracle Interrogation algorithm of van Dam [31 [7j (WVD). 
In this case, there is no promise on the problem (i.e., all possible X are 
allowed) . 

As before, we use the fact that an n-bit function / (i.e., {0, 1}" ^ {0, 1} 
so that iV = 2") can be described by an A^-bit string consisting of the values 
of /(x); this is represented as a state \F) = |/o/i • • • /n-i), where fx = f{x). 
An operator A), is introduced, the action of which depends on the Hamming 
weight of the state \x) (ie the number of Is in the binary representation 
of x): 



Ak\x)\b) 



< k 
> k 



(30) 



\x)\b®{F.x)) if 
\x)\b) if 

This operator requires at most k queries, because the query complexity 
of {F.x) is limited by the Hamming weight of \x), and can be carried 
out on states in superposition. The algorithm proceeds as follows: 



• Prepare starting state l^fc)"^ 
explained below) 



|1)) (l^'fc) depends on k, as is 



• Act on state with 

• Apply H'^^ to the first N quibits 

• Discard the ancilla qubit and measure the A'^ bits 

For comparison with the previous two algorithms, we use the 'approxi- 
mate oracle interrogation' version of WVD , for which the starting state 
l^'fc) is prepared as follows: 



k 

E 

j=0 



N 
j 



(31) 



xe{o,i}^ 
II^INi 



Upon measurement, the observed state \F') is 'close' to \F), by which 
we mean that we obtain an N-bit string of which m bits are correct (that is, 
it shares m bits with F, so correctly represents the function / for those m 
values of f{x)) and the remainder incorrect, where we don't know in which 
locations the correct bits are. The probability distribution for m is given by 



P{m) 



N 
m 



>7V 
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E 



k 
m 



-.Kj{m-N) 



(32) 



where ICj{m;N) is a Krawtchouk polynomial |Hj given by 

K,Kiv)=t(-ir(";)(^:r) 



(33) 



We follow van Dam and use. 



a, 



1 

Tk' 

0, 



k-Vk + l<j<k 
otherwise. 



For large A^, the optimal expected number of correct bits is 

N 



E{m] 



opt 



+ y/ky/N - k. 



(34) 



(35) 



and P{m) becomes highly peaked around this value in the limit of large A^ 
and k as detailed in the appendix. 
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Let us consider the function / which is nearly balanced or constant 
with A'^o zeros. We tackle the DJ problem in a similar way to the classical 
algorithm as discussed in section ESI using an estimator for the proportion 
of zeros in the full string (po = ^o/^)- In the WVD algorithm the analogous 
estimator is pQ = tuq/N, where mg is the number of zeros in the string after 
k queries. After k queries one obtains m correct bits of which mg are correct 
zeros. We assume that the correct bits are drawn at random from the full 
population so that the distribution of correct zeros is, in the limit of large 
N, given by 



P{mQ\m) 



m 



No 
N 



No 
N 



m—mt 



with 



(36) 



(37) 



Considering each case separately in terms of the degree of weakening of 



the promise, y/N (detailed in appendix) and assuming k large 



Mia 



M2a 



M26 



1 2y Ik f k 

2 ^ iV V iV ~ iV 




(38) 
(39) 
(40) 
(41) 
(42) 
(43) 



We can see that ^ is not an unbiased estimator for the number of zeros 
in the string for any of these distributions, in contrast to the previous two 
examples, so an inference scheme based on N/A < mo < 3N/4 implying 
'balanced' will not be optimal where y/N < 1/4. We must therefore shift 
the inference scheme to take this bias into account. The mid-points between 



the balanced and constant expectation values are N{^ it |\/-^ (l — ■^)) 
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Let us therefore assume the following scheme: 
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(44) 



(45) 



In the large N limit, we can assume the central limit theorem holds for 
these binomial distributions. The error probabilities then become: 
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(47) 



We now want to calculate the value of a to minimise Pfaii, so that using 
the fact that ^erf(x) = , and with k,N ^ 0, we have that this value 
is given by 

2y 4y2 ^ jy y\ ( ^ 4y2^^ ^^^^ 



1 + 
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so that knowledge of the quantity y/N is required to optimise this inference 
rule, and it is this optimal value that we shall be indicating by a in what 
follows. 

Finally, we have that 



^fail 



where 
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In the limit of /c >> and y/N << 1 we find 
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3.5 Comparison of DJ and WVD algorithms 

Comparing equations 1171 and 1521 in the hmit of ^ A; ^ 0, we find that 
the error probabiUties from the DJ and WVD algorithms are approximately 
equal when 
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(53) 



with a given by equation ^H] so that the D J and WVD algorithms in this 
limit share the same error probability when y/N ~ 0.0499. For values of 
y/N greater than this, the WVD algorithm is superior in correctly deciding 
whether or not the function in question is balanced or constant, given the 
assumption of large N and k. Furthermore, we note that in the region in 
which the given approximations hold, the classical algorithm is never better 
than the WVD algorithm. 



4 Conclusion 

Figures Q in which the relative performances of the three algorithms con- 
sidered here are compared, illustrates that the problem is still structured; 
the DJ algorithm is successful in solving the problem but loses power as the 
promise becomes more broken. The WVD algorithm, which is designed for 
determining functions that have no promise on their nature, can be adapted 
to perform well even for relatively small weakenings of the promise, and 
becomes superior to the DJ algorithm when more than about a twentieth of 
the bits defining the function under examination are flipped. 

We have found that the DJ algorithm is surprisingly robust when we 
consider breaks in the promise, with the failure probabilities driven pre- 
dominantly the chance of incorrectly inferring a constant function. The 
speed-up in comparison to a classical sampling algorithm, in terms of queries 
to achieve the same result, is obviously reduced over the case of the unbro- 
ken promise, but there is still an advantage for smaller weakenings of the 
promise. 
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Figure 1: InPfaii/fc against degree of weakening y/N, for DJ algorithm 
(unbroken line), WVD algorithm (long-dashed line) and classical algorithm 
(short-dashed line) 

When compared against the quantum algorithm tailored to unstructured 
problems, WVD, the DJ algorithm outperforms it for low degree of weaken- 
ing of the promise. The adaptation of the inference protocol for the WVD 
algorithm, based on the distribution of zeroes in the function string, is cru- 
cial in minimising the probability of incorrect decision, particularly for the 
smaller weakenings of the promise and thus the degree of the weakening of 
the promise needs to be known to optimise the success probability. The DJ 
algorithm, designed for the unbroken promise, nevertheless retains much of 
its advantage in the case where the promise is not greatly weakened and 
does not require modification according to the degree of weakening of the 
promise. 

Given access to all three algorithms, the DJ algorithm would be preferred 
if the weakening of the promise was described by y/N < .0499 and the 
WVD would be preferred if the weakening was greater than this, given the 
assumption of large N, k and N ^ k. The classical algorithm would never 
be preferred in this regime. 
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Appendix 

We approach the problem by first calculating the expectation and variance 
of m as a function of k and N in the large N (and k) limit. We follow van 
Dam and consider a perfectly constant string of N bits all of which are zero. 
We then obtain the expectation and variance for the number of I's in the 
string, t, produced by k queries and this result is then good, in fact, for the 
expected number of incorrect bits for any string under examination with the 
WVD algorithm. 
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Van Dam derived E{t\N,k); we reproduce this result initially for com- 
pleteness and then evaluate E{t'^\N, k). The probability distribution for the 
number of Is, t, in the output string from the WVD algorithm is given by 

k 

P{t\N,k) = ^ aia*7i,-(A^,t) (54) 

2 \ t J AT ^ ^ AT 

We are interested in calculating the first and second moments of t i.e. 
E{t\N,k) and E{t^\N,k) for which we introduce the following notation: 

N 

P^\N,t) = J^t%,(Ar,t) (56) 
t=o 

k 

E{e\N,k) = j;a^a*/3f;) (57) 

i,j=0 

We use the following Krawtchouk polynomial identities: the orthogonal- 
ity relation of the Krawtchouk polynomials [S] 

Yl^{^t) = ( ) ^^^^ 

and the three-term recursion relation |S] 

{N - 2t))Cj{t;N) = {j + l)ICj+i{t;N) + {N - j + l)/C,-_i(t; A^) (59) 



Multiplying Eni by 2"^ ^ ^ ^ ICi{t;N)/J ^ ) ( ) ' * 
and invoking the orthogonality relation l58l we find 

Pif = ^kj - + - ^x/(i + l)(Ar-i)5„_i (60) 

so that taking WVD's weightings Ui = k* for k — \fk < j < k and 
otherwise, 

E{t\N,k) = ^\ai\^ + - i)(a*+i«, + aja^+i) (61) 

AT 1 ^ 

= Y-^f E Vii + m-i) (62) 

j=k—\/k 
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In the limit that k,N >> 1 then each of the terms in the sum is ap- 
proximately of the order ~ y^k(N — k) and we can approximately write 



E{t\N,k) ^ y - y/k{N-k) + 0{^) 



(63) 



In order to calculate the variance we need to evaluate E{t'^\N, k). We 
evaluate by squaring the identity ISU] and then, again, multiplying by 



-N 



N 
t 



ICi{t;N), summing over t and invoking the orthogonality rela- 



tion EHl 
LHS = 

1 



N 
i 



4N 



N 
i 



N 1 : 



-V(i + l)(7V-i)<5,,,_i 



N 



t=0 



N 



Ki{t,N)Kj{t,N) 



RHS 



N 
i + l 



5ij + {i + l){N -j + l) 



N 
i + l 



-{N-i + l){j + l 



It is only the diagonal terms and the off-diagonal terms differing by 
|i — j'l = 1 and \i — j\ = 2 that are non-zero and we find that: 

= W + -i)+i {N + N^) if i = j 

= -^N^ /ijN^i + l) if i = j + 1 

= -l N^ii + l)iN-i) ifi = j-l ,gg. 

= y{N-i)iN-i-i){i + i){iTi } ifi + i = j-i 

= 1^{N - i + 2){N - i + - l)i ifi-l=j + l 
= otherwise 

so, therefore, assuming WVD's choice of weighting ctj 

k 

E{t^\N,k) = {i + l){N-i)+i{N-i-l))+N'^ 

i=k—\/k 
k—2 

+W E V(A^-^) (iV-i-l))(. + l)(i + 2) 



j=fc — V 



k,N»l N"^ 



— + k{N-k)- Nyjk {N ~k) + 0{N) (67) 
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and recalling that m = N — t, we find in the limit of k,N >> 1 



E{m) 
Var (m) 



- E{t) = y + ^/k{N-k) 

Var{t) = E{t^) - [E{t)f 
Ar2 



(68) 



+ k{N -k)- Nyjk {N -k) 



N 



VKN - k) 



w 0. (69) 

We can therefore assume that on exiting the quantum query algorithm we 
know that effectively a fixed number of bits, m = ^^+-\Jk{N — k) are correct. 
We assume that the algorithm knows nothing of the nature of the bits and 
therefore correctly or incorrectly ascertains a given bit's value randomly so 
that the number of correct zeros is given by, in limit of large N ^ 



P{mQ\m) 



m 



iVo" 
N 



N 



with 



Eim*,) = 
Var{mQ) = 
so that, given mo = N — Nq 

fi = E{mo) PS 
o"^ = Var{mo) w 



No 

^"^ = 


No / 


'N 


N \ 




iVo/ _ 
N \ 


No' 


)( 


~ N 





(70) 

(71) 
(72) 



m + 2mQ and using equations IHHl and EHl 




(73) 
(74) 



Considering each case separately in terms of the degree of weakening of 
the promise and substituting for No in terms of y, A^, we obtain equations 
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